How Cloudflare Detects MCP Traffic and Helps Secure It
Cloudflare, Friday, August 14th, 2026
Cloudflare Gateway now identifies MCP traffic using protocol-level heuristics so teams can find shadow MCP use.
Cloudflare described how Cloudflare Gateway identifies Model Context Protocol requests using protocol-level heuristics. Security teams can use that signal to find shadow MCP traffic on their networks, enforce Portal-only access for approved servers, and block direct connections on managed network paths.
The post notes that most companies designed their resource permissions with a human user in mind, which does not map cleanly onto agent-driven access.
Detecting MCP at the network layer gives teams visibility they otherwise lack. The piece is authored by AJ Gerstenhaber and Kenny Johnson.